SAP BASIS Security Engineer / Administrator

PlanIT Group, LLC; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

PlanIT Group, LLC is seeking a SAP BASIS Security Engineer / Administrator in the United States. The role focuses on SAP security foundations, role design, GRC controls, and Fiori/S/4HANA security across multiple SAP components.

You will manage user provisioning, SSO, and security authorizations while collaborating with basis, audit, and IT security teams. Responsibilities include role maintenance, incident response, regulatory compliance, and integration with SAP Cloud Platform.

Qualifications

• Experience securing SAP environments including ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, and SuccessFactors.
• Ability to design, build, and maintain SAP security roles with focus on Fiori authorizations across frontend and backend systems.
• Experience with SAP GRC Access Risk Analysis, BRM, and EAM for governance and risk management.
• Knowledge of GDPR, SOX, ISO 27001 and other regulatory requirements; audit-ready documentation.
• Experience with SAP Cloud Platform and SAP BTP security services.

Responsibilities

• Design, build, and maintain composite and single SAP security roles; conduct deduplication and SoD analysis.
• Provision users, enforce password policies, and enable SSO (Kerberos, SAML, OAuth).
• Activate and manage security authorizations for backend OData services used by Fiori apps.
• Monitor security alerts and respond to incidents; coordinate with IT security for patching and hardening.
• Create and maintain documentation for policies, role designs, and procedures; liaise with audit, basis, and functional teams.

Skills

SAP Security Foundations

SAP authorizations

SAP NetWeaver security

GRC knowledge (Access Control, Process

S/4HANA & Fiori Security

Identity & Access Management

SoD analysis

Tools

SU01

PFCG

SU24

SU53

ST01

CTS/STMS

Fiori Catalogs/Groups/Spaces

Job description

No Agencies

No C2C candidates

Job Description: TThis role is for a SAP BASIS Security Engineer / Administrator.

The Following Details Required And Desired Skills

• SAP Security Foundations
• Indepth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security

Engineering Methodology

• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
• Experience with software systems design

System & Platform Expertise

• Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
• Management of SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services

User & Role Management

• Design, build, and maintain composite and single roles
• Conduct role deduplication, role testing, and segregationofduties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools

Compliance & Auditing

• Implementation of SoD controls and remediation
• Ability to produce auditready documentation and reports
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation

Technical Tools & Utilities

• SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
• SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
• Use of transport tools (CTS, STMS) and changemanagement workflows
• Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
• Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG)
• ServiceNow or any other incident management tool

Security Incident Management

• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting rootcause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening

Programming & Scripting

• Basic ABAP debugging and code review for securityrelated enhancements
• Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting

Project & Change Management

• Experience with Agile or Waterfall delivery models
• Ability to manage multiple security projects, deadlines, and stakeholder expectations

Communication & Collaboration

• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training endusers and administrators on security best practices

Soft Skills

• Strong analytical and problemsolving abilities
• Attention to detail and high level of accuracy
• Proactive mindset and continuous learning orientation